125 lines
4.6 KiB
Java
125 lines
4.6 KiB
Java
/*
|
|
* Copyright (c) 2011, 2020, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/**
|
|
* @test
|
|
* @bug 6888925 8180570 8237804
|
|
* @summary SunMSCAPI's Cipher can't use RSA public keys obtained from other sources.
|
|
* @requires os.family == "windows"
|
|
* @library /test/lib
|
|
* @modules java.base/sun.security.util
|
|
*/
|
|
|
|
import java.security.*;
|
|
import java.util.*;
|
|
import javax.crypto.*;
|
|
|
|
import jdk.test.lib.SecurityTools;
|
|
import jdk.test.lib.hexdump.HexPrinter;
|
|
|
|
/*
|
|
* Confirm interoperability of RSA public keys between SunMSCAPI and SunJCE
|
|
* security providers.
|
|
*/
|
|
public class PublicKeyInterop {
|
|
|
|
public static void main(String[] arg) throws Exception {
|
|
|
|
cleanup();
|
|
SecurityTools.keytool("-genkeypair",
|
|
"-storetype", "Windows-My",
|
|
"-keyalg", "RSA",
|
|
"-alias", "6888925",
|
|
"-dname", "cn=6888925,c=US",
|
|
"-noprompt").shouldHaveExitValue(0);
|
|
|
|
try {
|
|
run();
|
|
} finally {
|
|
cleanup();
|
|
}
|
|
}
|
|
|
|
private static void cleanup() {
|
|
try {
|
|
KeyStore ks = KeyStore.getInstance("Windows-MY");
|
|
ks.load(null, null);
|
|
ks.deleteEntry("6888925");
|
|
ks.store(null, null);
|
|
} catch (Exception e) {
|
|
System.out.println("No such entry.");
|
|
}
|
|
}
|
|
|
|
static void run() throws Exception {
|
|
|
|
KeyStore ks = KeyStore.getInstance("Windows-MY");
|
|
ks.load(null, null);
|
|
System.out.println("Loaded keystore: Windows-MY");
|
|
|
|
PublicKey myPuKey = ks.getCertificate("6888925").getPublicKey();
|
|
System.out.println("Public key is a " + myPuKey.getClass().getName());
|
|
PrivateKey myPrKey = (PrivateKey) ks.getKey("6888925", null);
|
|
System.out.println("Private key is a " + myPrKey.getClass().getName());
|
|
System.out.println();
|
|
|
|
byte[] plain = new byte[] {0x01, 0x02, 0x03, 0x04, 0x05};
|
|
HexPrinter hp = HexPrinter.simple();
|
|
System.out.println("Plaintext:\n" + hp.toString(plain) + "\n");
|
|
|
|
Cipher rsa = Cipher.getInstance("RSA/ECB/PKCS1Padding");
|
|
rsa.init(Cipher.ENCRYPT_MODE, myPuKey);
|
|
byte[] encrypted = rsa.doFinal(plain);
|
|
System.out.println("Encrypted plaintext using RSA Cipher from " +
|
|
rsa.getProvider().getName() + " JCE provider\n");
|
|
System.out.println(hp.toString(encrypted) + "\n");
|
|
|
|
Cipher rsa2 = Cipher.getInstance("RSA/ECB/PKCS1Padding", "SunMSCAPI");
|
|
rsa2.init(Cipher.ENCRYPT_MODE, myPuKey);
|
|
byte[] encrypted2 = rsa2.doFinal(plain);
|
|
System.out.println("Encrypted plaintext using RSA Cipher from " +
|
|
rsa2.getProvider().getName() + " JCE provider\n");
|
|
System.out.println(hp.toString(encrypted2) + "\n");
|
|
|
|
Cipher rsa3 = Cipher.getInstance("RSA/ECB/PKCS1Padding", "SunMSCAPI");
|
|
rsa3.init(Cipher.DECRYPT_MODE, myPrKey);
|
|
byte[] decrypted = rsa3.doFinal(encrypted);
|
|
System.out.println("Decrypted first ciphertext using RSA Cipher from " +
|
|
rsa3.getProvider().getName() + " JCE provider\n");
|
|
System.out.println(hp.toString(decrypted) + "\n");
|
|
if (! Arrays.equals(plain, decrypted)) {
|
|
throw new Exception("First decrypted ciphertext does not match " +
|
|
"original plaintext");
|
|
}
|
|
|
|
decrypted = rsa3.doFinal(encrypted2);
|
|
System.out.println("Decrypted second ciphertext using RSA Cipher from "
|
|
+ rsa3.getProvider().getName() + " JCE provider\n");
|
|
System.out.println(hp.toString(decrypted) + "\n");
|
|
if (! Arrays.equals(plain, decrypted)) {
|
|
throw new Exception("Second decrypted ciphertext does not match " +
|
|
"original plaintext");
|
|
}
|
|
}
|
|
}
|